Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Name CVE-2010-2477 First vendor Publication 2010-11-05
Vendor Cve Last vendor Modification 2010-12-10

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:N/I:P/A:N)
Cvss Base Score 4.3 Attack Range Network
Cvss Impact Score 2.9 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores


Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving a 404 status code, related to (1) paste.urlparser.StaticURLParser, (2) paste.urlparser.PkgResourcesParser, (3) paste.urlmap.URLMap, and (4) HTTPNotFound.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2477

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13353
Oval ID: oval:org.mitre.oval:def:13353
Title: USN-1026-1 -- paste vulnerability
Description: It was discovered that Python Paste did not properly sanitize certain strings, resulting in cross-site scripting vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain.
Family: unix Class: patch
Reference(s): USN-1026-1
Version: 5
Platform(s): Ubuntu 10.04
Product(s): paste
Definition Synopsis:

CPE : Common Platform Enumeration

Application 21

OpenVAS Exploits

Date Description
2010-12-23 Name : Ubuntu Update for paste vulnerability USN-1026-1
File : nvt/gb_ubuntu_USN_1026_1.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
65809 Paste paste.httpexceptions 404 Message XSS

Nessus® Vulnerability Scanner

Date Description
2010-12-08 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1026-1.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/41160
CONFIRM http://bitbucket.org/ianb/paste/changeset/fcae59df8b56
MLIST http://groups.google.com/group/pylons-discuss/msg/8c256dc076a408d8?dmode=sour...
SECUNIA http://secunia.com/advisories/42500
UBUNTU http://www.ubuntu.com/usn/USN-1026-1

Alert History

If you want to see full details history, please login or register.
Date Informations
2021-05-04 12:11:42
  • Multiple Updates
2021-04-22 01:12:20
  • Multiple Updates
2020-05-23 01:42:17
  • Multiple Updates
2020-05-23 00:26:02
  • Multiple Updates
2016-04-26 19:55:29
  • Multiple Updates
2014-02-17 10:56:08
  • Multiple Updates
2013-05-10 23:28:00
  • Multiple Updates